General
- Target scan.exe
- Size 455KB
- Sample260520-vcchmset3q
- SHA256 aa1105659d2cba649744a8fab29478af596927dd6bd8da12db3d8a5bf2d3a15a
Score
10/10
Malware Config
Targets
-
- Target scan.exe
- Size 455KB
- SHA256 aa1105659d2cba649744a8fab29478af596927dd6bd8da12db3d8a5bf2d3a15a
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
Score3/10